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Interview Request 




YOUR REFERENCE NUMBER: 

10/040,050 


□ URGENT EI FOR REVIEW 


□ PLEASE COMMENT □ PLEASE REPLY □ PLEASE RECYCLE 



Examiner Powers, 

As you requested in the phone message that you left today following our earlier phone conversation, please find 
attached the Applicant Initiated Interview Request Form with a proposed date/time of Friday, April 28, 2000, at 
2:00 PM EST (11:00 AM PST). 

IT the Examiner grants this request for an Interview, but the proposed date and time are not acceptable, the 
Applicant respectfully requests that the Examiner propose an alternate date and time, keeping in mind that the 
Applicant is located in California and the 3 hour earlier time difference resulting therefrom. Thus, the Applicant 
would prefer to conduct the Interview during the later morning or afternoon of the Examiner's time. 

Also, as you requested, please find the attached discussion of arguments that the Applicant would like to discuss 
during the Interview. Please note that the Applicant is not proposing any claim amendments at this time and rather 
wishes to focus the interview on the basis of die rejections provide in the Final Office Action. 

Respectfully submitted, 

Craig Holmes 
Reg. No. 44,770 



THK INFORMATION CONTAINED IN THIS FACSIMILE IS INTENDED ONLY FOR TrtE PERSONAL AND CONFIDENTIAL USE OF THE 
DESIGNATED RKCrPIENT(S) NAMED ABOVE. THIS MESSAGE MAY BE AN ATTORNEY-CLIENT COMMUNICATION, AND AS SUCH IS 
PRIVILEGED AND CONFIDENTIAL, IF THE READER OF THIS MESSAGE IS NOT THE INTENDED RECIPIENT OR AN AGENT 
RESPONSIBJ^ F-OR DELIVERING IT TO THK INTENDED RECIPIENT, YOU ARE HEREBY NOTIFIED THAT YOU HAVE RECEIVED THIS 
DOCUMENT IN ERROR AND THAT ANY REVIEW, DISSEMINATION, DISTRIBUTION OR COPYING OP THIS MESSAGE IS STRICTLY 
™.i JHiHi rbu. li' VUU HAVE RECEIVED THIS COMMUNICATION IN ERROR, PLEASE NOTIFY US IMMEDIATELY BY TELEPHONE AND 
RETURN THE ORIGINAL MESSAGE TO US BY MAIL. THANK YOU. 
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Applicant Initiated Interview Request Form 



Application No.: First Named Applicant: /tle/jr^A Si 

Examiner: UsjAu* g. /fr***^ Art Unit: 2-/3 ¥ Status of Application: /vai>/^ ^A 

Tentative Participants: ^ y 



PL 



(4). 



Proposed Date of Interview: Proposed Time: Z- ■ <g*s> (AMjjSS?^*^ 

Tyro of Interview Requested: 

(1) m"Telephonic (2) [ ] Personal (3) [ ] Video Conference 



Exhibit To Be Shown or Demonstrated: [ ] YES 
If yes, provide brief description: 



Issues To Be Discussed 



Claims/ 
Fig. #s 



Prior 
Art 



Issues 

(Rej., Obj., etc) 

(3) 

(4) 

[ ] Continuation Sheet Attached 

Brief Description of Arguments to be Presented; 



Discussed 



Agreed 



Not Agreed 



t ] 


[ ] 


[ ] 


[ ] 


[] 


[J 


[ ] 


[ ] 


[ ] 


[ ] 


[ ] 


[ ] 



An interview was conducted on the above-identified application on • 

NOTE: This form should be completed by applicant and submitted to the examiner in advance of the interview 
(see MPEP § 713,01). 

This application will not be delayed from issue because of applicant's failure to submit a written record of this 
interview. Therefore, applicant is advised to file a statement of the substance of this interview (37 CFR 1.133(b)) 
as soon as p ossible. _ ^ 



^^licant/Applicanrs ; Representative Signature Examiner/SPE Signature 

Typed/Printed Name of Applicant or Representative 
Registration Number, if applicable ' 

ThU P«U»aaoD of Informatiau U required by 37 CTfl 1.133. Tbc inforiuMioja Cs t^uiial iw uliUiti or retain a beoeftt by rh* public which Is to file (*od by the 
USPTO to procw) an application. Confidentiality la governed by 35 IUJ.G 122 and 57 CFK 1.1 1 And 1.14, This colloetion \s estimated to talc* 2] rainuKa to 
complete, including Bothering, prcnr»rin£ f end aubmittine the completed application form to the USPTO, Time will vary depending upon the indtvidnol tine. Any 
comments on the amount of time you require (o complete thii form «rtd/or luggeidona for reducing thi§ burden. should be cent to (he Chief Information Officer, 
\)S Patent and Trademark Office, VS. Department of Commerce* P.O. Box 1450> Alexandria. VA 22313-1450. DD NOT SEND FEES OR COMPLETED FORMS 
TO THIS ADDRESS, SEND TO: Commissioner for Patents, P.O. Box 1450, Alexandria, VA 22313-1450- 

If you need assistance in completing the form, call 1-800~PTO*9J99 and select option Z 
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Attachment for "Applicant Initiated Interview Request Form" 

Description of Arguments to be Presented: 

The following description of the arguments is preceded by an example embodiment of Claim 1, as previously 
provided in the response to the previous Office Action, which the Examiner may find helpful in understanding the 
later presented issues. Following the example embodiment of Claim 1, the following three issues arc addressed: 
(1) the feature of a prime modulus (as included in all the claims), (2) the feature of modular exponentiation (as 
included in all the claims), and (3) the use of a power value that is equal to two less than the prime modulus (as 
included in Claims 1-4 and 12-16) being rejected upon Euler's Theorem as "admitted prior art." 

Example Embodiment of Claim 1 

The features of Claim 1 correspond to an implementation of expression (23) in the application, namely 
a - a' mod p s in which a modulo multiplicative inverse, a' 3 mod p, is determined based on modulo 
exponentiation, a * a mod p, with p being chosen to be a prime modulus. The approach of Claim 1 is 
implemented using a modulo exponentiation block, which avoids the problems of using the extended 
Euclidean algorithm (EEA) that is an iterative approach and slow for large numbers, which is today common 
with key sizes of 1024, 2048, or even more bits. As explained in the Application, EEA is typically implemented 
as a multiplicative inverse (MI) block through application specific integrated circuits (ASICs), that occupy a 
large area of chip 4< real estate." (Application, pages 3-4.) 

However, in the approach of Claim 1, existing blocks, such as a modulo exponentiation (ME) block, can be 
used that have smaller area requirements when implemented on a chip. This improvement is at the "expense" of 
requiring that the modulus be a prime modulus, which is required in deriving Equation (23) as illustrated in the 
Application, although such an expense is generally outweighed by the result of being able to calculate a 
multiplicative inverse using modular exponentiation in lieu of an ASIC that implements the larger and more 
time consuming MI circuitry. 

Specifically in Claim 1, the modulo exponentlator block is used in "determining a multiplicative inverse of 
the first integer data value modulo a prime modulus by computing a first quantity modulo the prime modulus 
data value," For example, the first integer data value is the value for which the multiplicative inverse is desired, 
such as "a" m expression (23) of the application. The prime modulus is "p" in expression (23). 

Next in Claim 1, the "firat quantity equals, modulo the prime modulus data value, the first integer data 
value raised to a power of a second quantity." For example, the first quantity is "a" in expression (23) modulo 
the prime modulus V raised to the power of the second quantity. 

Then in Claim 1, the "second quantity is two less than the prime modulus data value." For example, the 
second quantity is the exponent of expression (23), namely "p-2" or two less than the prime modulus. 

Issue 1 - Use of a Prime Modulus 

All of the claims feature the use of a prime modulus, yet the Applicant is unable to find where a prime modulus is 
mentioned in the cited portions of Naccache, although other portions of Naccache do refer to a prime modulus. As 
the Final Office Action currently stands, it does not appear to the Applicant that prima facie rejections have been 
established with respect to the "prime modulus" feature of the claim since none of the cited portions of Naccache 
disclose a prime modulus. Therefore, the Applicant would like to clarify with the Examiner during the Interview 
what the basis is for the "prime modulus" feature of the claims to cosine that this feature has not been overlooked in 
establishing the rejections of the Final Office Action. 
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For example, the rejections of Claims 1, 5, 14 and 15 cites Col. 4, lines 45-48 and Figure 2 with respect to the 
portion of the claims referring to a prime modulus, yet neither Col. 4, lines 45-48 nor Figure 2 discloses a prime 
modulus. In fact, in that cited portions of Naccache, there is only a reference to using a modulus "n" that is not 
described as being a prime modulus. 

While the Applicant notes that other portions of Naccache refer to the use of a prime modulus V' ^ ^ e DSA 
scheme (see Col. 5, lines 41-42, for example), the Final Office Action's rejections do not cite those portions of 
Naccache referring to the prime modulus "p." Thus, the Applicant would like to discuss the basis of the Final Office 
Action's rejection with respect to the prime modulus feature of the claims, and specifically which portions) of 
Naccache is being relied upon as disclosing the "prime modulus" feature of the claims. 

Issue 2 - Use of a Modular Exponentiation Block/Function 

All of the claims feature modular exponentiation, such as by using a "modulo exponentiation block" or a "modulo 
exponentiation function/' Yet the Final Office Action appears to only cite to Figure 2 of Naccache for this feature of 
the claims. Yet Figure 2 only discloses a CPU 30 that is illustrated as including "programs or computational 
resources corresponding to or implementation... exponentiation. *' (Figure 2; Col. 4, lines 25 - 34). The same is true 
with respect to Figure 1 of Naccache and the discussion of CPU 11 illustrated thereon as having '^modular reduction" 
but only "exponentiation" (see Col. 3, lines 52-60). 

While Figures 1 and 2 and the above cited portions of Naccache refer to "modular reduction" and Figure 2 and its 
description also referring to "modular inversion," there is no illustration, description, or reference to "modular 
exponentiation" anywhere within Naccache that the Applicant has been able to locate by either reading and reviewing 
the reference or performing electronic searches therein, Rather, as far as the Applicant has been able to determine, 
Naccache only refers to "exponentiation" without characterizing it as being modular. And as discussed in the 
previous Office Action response, a circuit for performing exponentiation is not the same as a circuit that performs 
modular exponentiation. 

Thus, given that Naccache expressly refers to "modular inversion" and "modular reduction," yet only refers to 
"exponentiation," the Applicaut Xkils to see any disclosure within Naccache of either a "modulo exponentiation 
block" or a "modulo exponentiation function" as featured in the Claims. Therefore, the Applicant would like to 
discuss with the Examiner the basis within Naccache for the Final Office Action's rejection with respect to the 
"modulo exponentiation block/tunction" as featured in the claims. 

Issue 3 - Characterizing Equation (73) of the Application 
as "Euler's Theorem" & Applicant Admitted Prior art 

Claims 1-4 and 12-16 feature the use of an exponent that is equal to the value of "the prime modulus less two," a 
value "two less than the prime modulus" value, or similar variations thereof. The Final Office Action rejects this 
feature of Claims 1-4 and 12-16 based on the alleged "Applicant admitted prior art," namely Euler's Theorem as 
presented in paragraph 43 of the Specification of the Applicant's disclosure. However, for the reasons outlined 
below, the Applicant respectfully submits that characterizing the entire content of paragraph 43 as Euler's Theorem is 
incorrect 

In paragraph 43 of the Applicant's specification, a derivation of Equation 23 is presented. The derivation begins 
with a statement of Euler's Theorem, namely that for two positive numbers "a" and 'V thai are relative^ yzimz 
their greatest common denominator is 1, which is often expressed as gcd(a,b)=l), the following relation is true: a * W 
= 1 mod b. This equation-based representation of Euler's Theorem is identified in the specification as Equation (21). 
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Note that "relatively prime" means that the only common denominator between two numbers is 1, but that this 
does not mean that either number is prime itself. For example, the numbers "3" and "4" are relatively prime because 
the greatest common denominator between "3" (with denominators of 1 and 3) and "4" (with denominators 1, 2, and 
2) is tt l." Yet "4" is clearly not prime as the factors of 4 are 1, 2, and 2, with "2" being repeated, meaning that "4" is 
not a prime number (e.g., a number that is only divisible by "1" and itself). 

Thus, the Applicant would agree that Equation (21) of the specification maybe characterized as Euler's Theorem, 
This is consistent with other descriptions of Euler's Theorem, as indicated in the attached examples, and no doubt in 
other examples that could be found in performing a search of "Euler's Theorem." Note that in the presentation of 
Euler's Theorem in the specification, which is consistent with the examples provided, the only restrictions on "a" and 
"b" is that both be a positive number and that "a" and 1 V are relatively prime with respect to each other. 

The derivation of paragraph 43 then proceeds from Euler's Theorem, represented by Equation (21), as the starting 
point to reach Equation 22, which is a manipulation of Equation (2 1) to determine on expression that relies upon 
modular exponentiation. Note that the use of modular exponentiation in Equation (22) is unlike the statement of 
Euler's Theorem in Equation (21) that does not involve modular exponentiation. Thus, the Applicant disagrees with 
the Final Office Action's characterization of Equation (22) as being part of "Euler's Theorem" since the inclusion of 
modular exponentiation in Equation (22) is different than in Equation (21) that lacks any modular exponentiation. 

Then in finally deriving the expression identified as Equation (23) in the specification, the derivation assumes that 
'V is equal to a positive prime number. It is only with this further limitation/restriction that the function * W is equal 
to "p- 1 and thus " r becomes "p-2" as shown in Equation (23). As a result of the expression of Equation (23), 
it can be observed that a modular multiplicative inverse can be obtained through the use of modular exponentiation 
which is not the case with Euler's Theorem in Equation (21). 

Therefore, Equation (23) is clearly and unambiguously different than Euler's Theorem, as represented by 
Equation (21). because Euler's Theorem only requires "b" be a positive number, whereas Equation (23) requires that 
p be a positive prime number and be relatively prime with respect to "a." As a result, the Applicant respectfully 
disagrees with the Final Office Action's characterization that all of paragraph 43 of the specification is Euler's 
Theorem and therefore "admitted prior art" Rather, the Applicant respectfully submits that only Euler's Theorem, as 
represented by Equation (21), is properly characterized as prior art with the remainder of paragraph 43. including 
both Equations (22) and (23), not being prior art. 

In fact, the rejection of Claims 1 -4 and 12-16 on the basis of Equation (23) effectively is a rejection of the 
Applicant s claims on the Applicant's own invention, as represented by Equation (23), which the Applicant 
respectfully submits is improper. 

Conclusion 

The Applicant respectfully requests that the Applicant's request for an Examiner Interview be granted so that the 
basis of the rejections of the claims with respect to the "prime modulus" and "modulo exponentiation" features of the 
c aims can be explained to the Applicant. In particular, with regards to the "modulo exponentiation" feature of the 
claims, the Applicant is unable to find anything in Naccache that discloses this feature, and the Applicant would 
appreciate the Examiner providing a description of what is being relied upon as disclosing modular exponentiation. 

Also, the Applicant believes that discussing the alleged "Applicant admitted prior art" of Euler's Theorem as 
presented in Equation (21) of paragraph 43 of the specification would be beneficial to the Examiner in understanding 
ttat whueEquatton (21) may be characterized as "Euler's Theorem," Equation (23) is not properly characterized as 
Euler s Theorem since Equation (23) requires a restriction to a prime modulus that is not part of Euler's Theorem. 
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ABSTRACT 



An electronic computation circuit comprises a multiplica- 
tion operator with a serial input, a parallel input ntd a serial 
output, a first register connected by its output to the parallel 

input of the Operator, a second register connected by its 

output to the serial input of tjse operator, a third register and 
a multiplexing circuit to selectively connect si least one data 
input terminal and the output of the operator to the inputs of 
tbo flirt, second and child icglstc*, and to produce the output 
of the electronic multiplication circuit Application to the 
operations of multiplication, squaring, exponentiation and 
modular inversion on a finite field denoted GF(2"). 

34 Claims, 3 Drawing Sheets 



25 



19 



r 



21 



28 



r 



20 



1 J 



24 



NX 



18 



< 

22 



23- 



27 



-SE.DE 



T 7 " 

17 



16 



V 
29 



12 



14 

13 15 



PAGE 6/9 * RCVD AT 4/25/2006 7:49:52 PWl [Eastern Daylight Time] * SVR:USPTO€FXRF-6/29 * DNIS:2738573 * CSID:4083920542 * DURATION (mm-ss):04-08 



84/25/2006 15:46 4083920542 HPTB PAGE 07 



5,742,534 

5 6 

Y?*X*Y pcrfcnnancc of the multiplication and squaring operations, 

i^j-L and there must tberefuc be a ™ga™ available to hold (he 

Jt can tims be seen than states present at the parallel input of the operator in a stable 

if ef=0, the algorithm implements a squaring operation SQle ^"fl performanoc of these operations. 

l\ ^^7fZ <„™t<M* m , „ ^ N and M (referenced gcdCN,M)) f with N and M being ( „W*^ 

1) the selection of the inputs of the multiplexers 22, 23 10 integers, is equal to 1 (N iod M as prime numbers \ H fc* 

ifJS £ £ VZZ? I 6 3f f ?o ^T.^ ^ " each other), then l^^t J J ^ 

17 and 18 to Che data input terminals 19, 20 and 21, Euler function. 

2) loading by me ahifting cfX into the first, second and Now. if M«2n* then C^M)^- 1 . 

third registers 16\ 17 and 18, Li the case of GF(2*) which Is relevant here, assuming 

for i from 1-2 to 0: u therefore that N is encoded on o bits: 

if tpQ then: either N is an even number and god(N l M>a r > withr as an 

3) the selection of the multiplexers 22 and 23 so as to integer smaller than or equal to n, 

connect the inputs uf ihrtataod second registers to me or N is an odd n amber ana gcoXN,M>a and according to 

output of the multiplication operator, Euler's theorem, N^l mod(2 m ) with DwZ*" 1 . 

4) the shifting of the contents of the second register into 20 Thus, if N is an odd number, we have 
this register so as to successively give the d bits on too/a"), with B=©-fc52"-*-l. 

which its contents are encoded to the multiplication The modular inversion therefore amounts to an cxponcn- 

operator, the n bits that gradually come out of this nation with a exponent B such that l=te=a-l, with 1 and k 

operator and that represent a squaring operation being being defined identically to the manner described hoe 

simultaneously Wded into th* first and cecead regis- above The computation of theinvcrsc of an odd number will 

ters (at least so long as IX)) therefore be done in a constant period of m cycles with: 

if oilmen; m=<2*n-3)*(n+i) if we take account of the steps 1 and 2 

3) the selection Of the multiplexers 22 and 23 so as to of the exponentiation as defined here above, 
connect, firstly, the inputs of the first and third register 30 m=2*(n-2)»(n+l) if the only steps taken into account are 
to the output of the third register and, secondly, the the other steps (the computation proper). 

input of the second register to the output of the multi- Two's Complement Operation 

plication operator, At present, too circuit ST16CF34 by SOS-THOMSON 

4) the shifting of the contents of the second register into MICROELECTRONICS SA. uses software methods to 
this register so as to successively give the n hits on 95 resolve the equation Jp'N^lM) mod(2"), with n»32 and N 
which its contents are encoded to the multiplication as a known number encoded on n bits. This resolution, as 
operator, me n bits that gradually come out of this indicated in the introduction, is implemented by (he central 
operator and represent the result of a squaring operation processing unit of this circuit in an average time of 250 
being sirnult&neousiy loaded into the second register (at microseconds. Daring this time, its mithnrnriVal coproces- 
least so bug as £>0) and, at the same time, the shifting 40 tor is stopped. The program used to resolve this equation 
of the contents of the third register into this register (by furtbecmore takes up 124 bytes of read-only memory, 

the looping of the output to the input) and into the first It wiD be observed that the resolution of this equation is 
register, equivalent to resolving the equation 1 0 — -K<f 1 modCZ^), 

5) the scIccuod of tbe niultfuloxcrs 22 and 23 BO as to ^ circuit U as described here above enable* the cozn- 
cormect the inputs of the first and second regis tera to the 45 Potion of mod(2**). If wo consider a clock signal with 
output of the multiplication operator, a frequency of 40 MegaHerti (me case of the ST16CF34), 

<5) the shifrin* of the contents of the second register into this computatton requires, apart from the steps 1 end 2, ft 
this register so as to successively rive the nHts on cuc ^ utgdo n 49,5 microseconds and a total procea> 

which ^ntent^ ^SS^VStSl^^ m * \ "* * M 

operator, the n bits that gradually come outof this 50 0B ? i lTT* ? c VCIiad °* re8cdufio ° * I» 
^'sMr^cotth B rK^^ '^^^t^^^V^ ^ l6 ^i 
being simultaneously loaded into the first andsecond ? v . tt *i * 010 w juch is of a wired 

regifitcra 16 and 17(at least so lono as i>€l logic type, this circuit can bo easily integrated into an 

Steps l) and 2) require o+l cycles to be termed. „ i^srated Mu** the one designated. SmuTarry, this 
The *cp« 3) ^ 4? on the one- hand and 5)a*dflun fee- 35 cfr«it could easily be intend Into an existing mamernahV 
other hand also reatrien^l cydesTbe^S cal corroc^scc without any radical rnodiflcation, give the 

On the whole, the duration i of the rnJessmg wiflbem * ***** desodbed, ^mhcrmore, the 

cycles widu K approach of the invention enables a gain in readonly 

memory since the fexolvitig of the equation no longer 
m-<^iW(i-t>K*-i))*0»+iXtittt it np(^i)^fi). « rnoHHzes the resources of the central frfocessing unit 

It will be noted mat although the Invention refers to a 
If fc=0, the last step will reveal the deauxd result at output particmar product, it is nonetheless usable in any other 
of the rrjultipl!c*fioo aerator. circuit who»o cpplicedco pcrtaina to Ac c^xrvo-defined 

The ntiliry of the storage circuit 29 appears clearly in the operations in a Galois 
context of exponen ti a ti o n . Indeed, during the implement*- 65 In the context of me SH6CFS4, it is sought to resolve the 
don of the above^ escribed method, a serial loading is equation Jc^-No" 1 (mod^ 52 )), The drcuit U as described 
caaied out, in the firot register, of the bits during (he hare above euable* the Wrapuutioo of -J^ It la poaslble in 
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Euler's theorem 

Date: 7/2/96 at 13:46:32 

From : Anonymous 

Subject: Buler's Theorem 

I am not sure how to find the inverse of a modulo m using Euler's 
theorem. Using the formula of my book, I end up just getting a. The 
answers I get are also not what the book haG as the answers. Any 
hints would be appreciated, 




Dare: 7/2/36 at 17:30:44 
From: Doctor Anthony 
Subject: Re: Ruler's Theorem 

Euler's theorem states that if (a,m)=l (i.e. a and m are relatively f 
prime), then a A (phi (m) ) « l (mod m) where phi (m) is the number of 
integers less than m and prime to it A* <&<*o „ , . x 

* * S>,, ~ 1 ( **** **V 

If phi(mj = n then a*n == 1 (mod m) 

So a*a x (n-l) l (mod m) but a*a*(-i) — i (mod m) 
and so a" (-1) == a~(n-l) (mod m) 

-Doctor Anthony, The Math Porum 
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